● Impresszum · Privacy

The fine print.

Impresszum (legal notice)

zsombp.com is the personal portfolio of a private individual.

Site owner and operator: Zsombor Petneházi
Legal status: Private individual
Email: [email protected]
Website: https://zsombp.com
Hosting provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, www.cloudflare.com

Copyright

All photographs on this site are © Zsombor Petneházi. All rights reserved. Please don't use, copy or republish them, or use them to train AI models, without my written permission. For prints and licensing, write to [email protected].

Privacy notice

Last updated: 4 November 2026

The short version: no analytics, no ads, no tracking, no cookies. The only personal data I see is what you choose to send me by email.

Who is responsible

The controller of your personal data is Zsombor Petneházi. You can reach me about anything on this page at [email protected].

When you visit the site

The site is hosted on Cloudflare Pages. To deliver the pages and protect the site from attacks, Cloudflare necessarily processes your IP address, browser type, the page you request and the time. The legal basis is my legitimate interest in running a secure, working website (Article 6(1)(f) GDPR). I don't receive these logs or any visitor statistics. Cloudflare keeps this data only as long as it needs to, under its privacy policy.

To hide my email address from spam bots, Cloudflare adds a small script, served from this site itself (under /cdn-cgi/). It doesn't track you.

No cookies, no tracking

This site sets no cookies and has no analytics, ads, tracking pixels, embeds or third-party scripts. The fonts are hosted here too, so your browser doesn't contact Google or any font service. That's why there is no cookie banner: there is nothing to consent to.

Your browser's session storage holds three small entries that make the site behave smoothly:

zs-seen: the intro animation has already played, so it doesn't repeat on every page.
zs-nav: tells the next page to play the page-transition animation.
zs-scroll: remembers how far down each page you were, so the Back button returns you to the same spot.

They contain nothing about you, are never sent anywhere, and disappear when you close the tab. As strictly necessary interface settings, they need no consent under EU ePrivacy rules (Article 5(3) of Directive 2002/58/EC).

The contact form

The contact form doesn't send anything to a server. Pressing Send opens your own email app with a ready-made message to [email protected] containing your name, email address, message and type of enquiry. Nothing leaves your device until you send that email yourself.

When you email me

If you write to me, I receive your email address, your name and whatever you include in the message.

Why: to reply and handle your request, whether it's a portrait or event booking, a print, or just a hello.
Legal basis: for bookings and print orders, steps taken at your request before a contract (Article 6(1)(b) GDPR); for other messages, my legitimate interest in replying (Article 6(1)(f) GDPR).
How it travels: mail to [email protected] is forwarded by Cloudflare Email Routing to my Gmail inbox. For users in the EEA, Gmail is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (privacy policy).
How long: as long as needed to handle your request, then up to two years after our last contact, so I have context if you write again. Then I delete it. If a booking leads to an invoice, the invoice and its supporting records are kept as long as Hungarian accounting law requires, currently 8 years (Article 6(1)(c) GDPR).

Writing to me is voluntary, but without an email address I can't reply.

Instagram

My Instagram (@zsomb_photos) is only linked, not embedded, so Meta learns nothing from your visit here. Once you follow the link, Meta's privacy policy applies.

People in my photos

Much of my work is street photography: crowds, trams, night streets and public events such as the Rendszerbontó demonstration in Budapest. Portraits are taken with the person's agreement. I publish street photos on the basis of freedom of artistic expression (Article 85 GDPR) and my legitimate interest in showing my work (Article 6(1)(f) GDPR).

If you recognise yourself in a photo and would rather not be on the site, just email me with a link to the photo or the name of the series. I'll remove the photo or blur you within a few days, and never later than a week. No reason needed. If the photo is also on my Instagram, I'll take it down there too.

Transfers outside the EU

Cloudflare and Google are US companies, so some data may be processed in the United States. Both are certified under the EU–US Data Privacy Framework, which the European Commission found adequate in its decision of 10 July 2023. I don't share personal data with anyone else, except authorities where the law requires it.

Your rights

You can ask me for:

access to your data and a copy of it;
correction of anything wrong (rectification);
deletion (erasure);
a pause on its use while a question is sorted out (restriction);
a machine-readable copy (portability).

You can also object to any use based on legitimate interest, including showing a photo of you. If a portrait of you is here because you agreed, you can change your mind at any time.

Just email [email protected]. I'll reply within one month at the latest, usually much sooner. If it's unclear whether a request comes from you, I may ask you to confirm who you are.

Complaints

If you think I've handled your data wrongly, please tell me first so I can put it right. You can also complain to the Hungarian data protection authority:

Authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary
Postal address: 1363 Budapest, Pf. 9.
Email: [email protected]
Phone: +36 1 391 1400
Website: naih.hu

If you live elsewhere in the EU, you can also go to your local authority. You can also go to court: in Hungary these cases are heard by the regional court (törvényszék), and you can choose the one where you live.

Other things to know

There is no automated decision-making or profiling. This notice follows the GDPR (Regulation (EU) 2016/679) and the Hungarian Information Act (Act CXII of 2011, Infotv.). If anything changes, I'll update this page and the date at the top.